[C#][Help] MPGH Login

tlokzz · 2012-05-10T08:34:17.000Z

As Jason said. There is no reason to hook into anything deeper then HTTP requests. That would expose a security that no site would allow. Plus it needs some sort of an API. Purchase VB and search through its source.

Here is a working example for MPGH.

-- This is only the source. I don't want to disrespect forum rules and post straight executable. I use VS 2011 Beta.

I developed Forums.exe which is a form you can type in your credentials and it will send the request, save the cookie, and add it to the WebClients objects header. To show that you are logged in it will also show another form with just a richtextbox that has MPGH - MultiPlayer Game Hacking - Hacks, Cheats, Trainers, Downloads, Combat Arms Hacks, CrossFire Hacks, Call of Duty Hacks, Battlefield Hacks, Blacklight Retribution Hacks, Vindictus Hacks, Battlefield 3 Hacks, Project Blackout Hacks, WarRock Hacks source. Read through the source and you'll find out if your successfully logged in. Took less then 30 mins to create. Enjoy.

Credits: [C#] vBulletin Login function - Classes and Code Snippets - CODECALL Programming Forum -- Initial function (don't use it has a bug in it and won't work, mine is same function but fixed, so still cred required)

https://www.virustotal.com/file/73b6...is/1336635096/
http://virusscan.jotti.org/en-gb/sca...2aadba7728e926

Forums.rar17 KB · 53 downloads Scanning…

Download & Thanks

Rakuuza · 2012-05-03T04:07:44.000Z

[C#][Help] MPGH Login

Hello,
How would I be able to login to MPGH via C# or even VB.Net. As I am trying to make a browser purely based on MPGH and feature towards it, but at the moment to no avail can I get the login to work. I have located the code for everything else, but it's all useless since it can't do a remote login (eg. through the program and not navigating to the webpage)

I have tried so many methods of coding, from injecting a cookie to filling in the forms manually, but it doesn't help. Could I please get some help on this matter?

Thanks in advanced.

Jorndel · 2012-05-03T07:52:16.000Z

Originally Posted by Rakuuza

Hello,
How would I be able to login to MPGH via C# or even VB.Net. As I am trying to make a browser purely based on MPGH and feature towards it, but at the moment to no avail can I get the login to work. I have located the code for everything else, but it's all useless since it can't do a remote login (eg. through the program and not navigating to the webpage)

I have tried so many methods of coding, from injecting a cookie to filling in the forms manually, but it doesn't help. Could I please get some help on this matter?

Thanks in advanced.

I suggest you to look on this:
HttpWebRequest Class (System.Net)

Code I found: (No credit to me, just found)

Code:

using System; 
    using System.Web;
    using System.Net; 
    using System****;
    using System.Web.UI;
    using System.Web.UI.WebControls; 

namespace Foo
{
    public partial class _Default : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {


            HttpWebRequest req = (HttpWebRequest)HttpWebRequest.Create("Site"); 
            req.UserAgent = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705;)"; 
            req.Method = "POST";
            req.Accept = "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8";
            req.Headers.Add("Accept-Language: en-us,en;q=0.5");
            req.Headers.Add("Accept-Encoding: gzip,deflate");
            req.Headers.Add("Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7");
            req.KeepAlive = true;
            req.Headers.Add("Keep-A****** 300");
            req.Referer ="Site";

            req.ContentType = "application/x-www-form-urlencoded"; 

            String Username = "username";
            String PassWord = "Password";

            StreamWriter sw = new StreamWriter(req.GetRequestStream());
            sw.Write("application=portal&url=" + Username + "&password=" + password + "");
            sw.Close();

            HttpWebResponse response = (HttpWebResponse)req.GetResponse();


            StreamReader reader = new StreamReader(response.GetResponseStream());
            string tmp = reader.ReadToEnd();

            foreach (Cookie cook in response.Cookies)
            {
                tmp += "\n" + cook.Name + ": " + cook.Value;
            }


            Response.Write(tmp);
            Response.End();

        }
    }
}

You need to write it yourself tho

Rakuuza · 2012-05-03T08:29:53.000Z

Originally Posted by Jorndel

I suggest you to look on this:
HttpWebRequest Class (System.Net)

Code I found: (No credit to me, just found)

Code:

using System; 
    using System.Web;
    using System.Net; 
    using System****;
    using System.Web.UI;
    using System.Web.UI.WebControls; 

namespace Foo
{
    public partial class _Default : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {


            HttpWebRequest req = (HttpWebRequest)HttpWebRequest.Create("Site"); 
            req.UserAgent = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705;)"; 
            req.Method = "POST";
            req.Accept = "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8";
            req.Headers.Add("Accept-Language: en-us,en;q=0.5");
            req.Headers.Add("Accept-Encoding: gzip,deflate");
            req.Headers.Add("Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7");
            req.KeepAlive = true;
            req.Headers.Add("Keep-A****** 300");
            req.Referer ="Site";

            req.ContentType = "application/x-www-form-urlencoded"; 

            String Username = "username";
            String PassWord = "Password";

            StreamWriter sw = new StreamWriter(req.GetRequestStream());
            sw.Write("application=portal&url=" + Username + "&password=" + password + "");
            sw.Close();

            HttpWebResponse response = (HttpWebResponse)req.GetResponse();


            StreamReader reader = new StreamReader(response.GetResponseStream());
            string tmp = reader.ReadToEnd();

            foreach (Cookie cook in response.Cookies)
            {
                tmp += "\n" + cook.Name + ": " + cook.Value;
            }


            Response.Write(tmp);
            Response.End();

        }
    }
}

You need to write it yourself tho

Have done similar methods but to no avail did they work. I'll try that one though. Thanks

Jorndel · 2012-05-03T09:56:43.000Z

Originally Posted by Rakuuza

Have done similar methods but to no avail did they work. I'll try that one though. Thanks

I am not sure but as I understand.
You don't want to use the webbrowser to type the username & password for you.

Code found: (No credit to me, I just found

)

Code:

private void btnLogin_Click(object sender, EventArgs e)
{
    HtmlElement ele = webBrowser1.Document.GetElementById("username");
    if (ele != null)
        ele.InnerText = "Set Username";

    ele = webBrowser1.Document.GetElementById("password");
    if (ele != null)
        ele.InnerText = "Set Password";

    ele = webBrowser1.Document.GetElementById("Login Click");
    if (ele != null)
        ele.InvokeMember("click");
}

Rakuuza · 2012-05-03T15:32:12.000Z

Originally Posted by Jorndel

I am not sure but as I understand.
You don't want to use the webbrowser to type the username & password for you.

Code found: (No credit to me, I just found

)

Code:

private void btnLogin_Click(object sender, EventArgs e)
{
    HtmlElement ele = webBrowser1.Document.GetElementById("username");
    if (ele != null)
        ele.InnerText = "Set Username";

    ele = webBrowser1.Document.GetElementById("password");
    if (ele != null)
        ele.InnerText = "Set Password";

    ele = webBrowser1.Document.GetElementById("Login Click");
    if (ele != null)
        ele.InvokeMember("click");
}

Thank you as I am home I shall test both methods, I know the second method works but that uses the web browser idea. if the first method doesn't work I'll use a suppressed web browser idea.

Thank you or the great help!!

user590177 · 2012-05-05T20:53:27.000Z

You could access the users Database....Oh wait...

Rakuuza · 2012-05-06T08:43:02.000Z

Originally Posted by user590177

You could access the users Database....Oh wait...

Yeah, that would make things simple but Dave wouldn't allow it lol. So I have to try inject the user and pass to the php script

user590177 · 2012-05-06T14:14:49.000Z

Originally Posted by Rakuuza

Yeah, that would make things simple but Dave wouldn't allow it lol. So I have to try inject the user and pass to the php script

Yes and what then? You won't have access to any kind of information....Well you will but it would be so fucking complicated. (and probably will take time)

Rakuuza · 2012-05-06T14:20:47.000Z

Originally Posted by user590177

Yes and what then? You won't have access to any kind of information....Well you will but it would be so fucking complicated. (and probably will take time)

I understand that but if I only make a basic / intermediate one then maybe Dave might give me access. If not I'll try the complicated method

user590177 · 2012-05-06T14:24:50.000Z

Originally Posted by Rakuuza

I understand that but if I only make a basic / intermediate one then maybe Dave might give me access. If not I'll try the complicated method

I don't think that Dave will allow that. Since having access to the database consists in a high risk for MPGH. Let's be honest nobody knows how things will go, maybe some kind of hacker will decompile your code and have access to the databases delete users, get the head admin password, or whatever else.

Rakuuza · 2012-05-06T14:47:01.000Z

Originally Posted by user590177

I don't think that Dave will allow that. Since having access to the database consists in a high risk for MPGH. Let's be honest nobody knows how things will go, maybe some kind of hacker will decompile your code and have access to the databases delete users, get the head admin password, or whatever else.

That's 100% true that's why my current method is the hard way, that way I didn't rely on any type of access only php post methods which this forum runs on. And being vbbulletin it isn't as hard as a custom build forum as you can find resources on all functions.

Secondly I wouldn't be stupid enough to put database details in the program . Secondly vbbulletin only allows access from a white list

user590177 · 2012-05-06T15:03:56.000Z

Originally Posted by Rakuuza

That's 100% true that's why my current method is the hard way, that way I didn't rely on any type of access only php post methods which this forum runs on. And being vbbulletin it isn't as hard as a custom build forum as you can find resources on all functions.

Secondly I wouldn't be stupid enough to put database details in the program . Secondly vbbulletin only allows access from a white list

Didn't know about that white list thingy. Anyways if you want to connect to a database you must put the database info somewhere...

Rakuuza · 2012-05-06T15:21:41.000Z

Originally Posted by user590177

Didn't know about that white list thingy. Anyways if you want to connect to a database you must put the database info somewhere...

Correct, I would connect to a php script for database, most secure method. As it is the same way 99% of the forums do.

'Bruno · 2012-05-08T12:57:47.000Z

You guys do realize that you can "restrict" users database access and such right? .___. Such as write/read on a table, etc..

So, you could actually have a user whom can only do queries to a table on a DB. (Which i dont see any risk about knowing the credentials by getting hacked or something)
Just not sure of how much freedom you have on a VBulletin forum/dbs/etc...

Rakuuza · 2012-05-08T14:57:22.000Z

Originally Posted by 'Bruno

You guys do realize that you can "restrict" users database access and such right? .___. Such as write/read on a table, etc..

So, you could actually have a user whom can only do queries to a table on a DB. (Which i dont see any risk about knowing the credentials by getting hacked or something)
Just not sure of how much freedom you have on a VBulletin forum/dbs/etc...

Really probably is easier using a web scraping method!!

[C#][Help] MPGH Login

Post a Reply

Similar Threads

Tags for this Thread